Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B82236063FD911F1BCB3B00ECF1D38B0.roa
File: B82236063FD911F1BCB3B00ECF1D38B0.roa (raw, json)
Hash identifier: q/fbznKbLkj2iyz3/lcIV8f7AAORLbFjIocdZ+orU+g=
Subject key identifier: 08:3F:06:9E:CF:C5:51:2D:3B:FE:69:C1:80:3C:62:02:C9:57:08:7A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C74A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B82236063FD911F1BCB3B00ECF1D38B0.roa
Signing time: Fri 24 Apr 2026 12:32:56 +0000
ROA not before: Fri 24 Apr 2026 12:32:51 +0000
ROA not after: Sun 31 May 2026 12:32:51 +0000
asID: 62240
IP address blocks: 154.90.173.0/24 maxlen: 24
154.94.34.0/24 maxlen: 24
154.94.39.0/24 maxlen: 24
154.94.42.0/24 maxlen: 24
154.94.45.0/24 maxlen: 24
154.94.57.0/24 maxlen: 24
154.94.58.0/24 maxlen: 24
154.94.61.0/24 maxlen: 24
154.94.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116554 (0x1c74a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 24 12:32:51 2026 GMT
Not After : May 31 12:32:51 2026 GMT
Subject: CN=69eb62f8-a9b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:8a:9e:60:b4:3d:fa:54:31:cf:d0:14:0c:99:
2f:46:77:dd:25:be:41:d4:0c:47:a1:0d:20:4d:01:
44:e5:14:2a:dd:f6:ef:86:38:4a:61:0c:83:55:27:
8b:21:53:59:71:7f:ad:2f:22:0c:9f:12:37:af:fe:
66:7d:4a:85:07:82:9f:b1:b7:d8:48:53:d2:7a:f4:
d7:d6:79:c8:33:f6:68:fa:44:6b:d2:43:67:49:58:
52:f8:09:0c:6e:a7:36:ba:92:7e:a3:c4:6e:c4:75:
9f:5f:82:2f:df:ad:86:c7:6e:e2:a3:50:c7:40:aa:
b9:60:8a:1c:a3:5c:89:a9:b2:db:de:b3:cf:9d:0f:
2f:04:b2:d8:5c:d6:42:e8:9b:62:fd:1a:b6:ea:c2:
a3:cc:a3:03:9d:ae:13:4f:8c:8b:5b:81:55:65:8d:
29:29:10:24:a5:f3:c3:1d:c0:13:ef:d3:44:b6:f8:
0f:7d:93:53:a9:0b:4b:cf:5b:a1:ce:f8:08:cc:41:
63:42:ad:fe:26:f2:da:cf:6f:2e:f4:49:d4:b2:da:
db:02:e3:4b:f0:51:5b:6a:1f:13:ae:f1:f5:e0:e9:
be:88:23:ff:e1:68:28:99:e9:31:52:a2:8a:7f:4c:
7b:61:22:a8:7a:3c:1a:e8:9c:ae:0a:53:c6:0a:45:
f5:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:3F:06:9E:CF:C5:51:2D:3B:FE:69:C1:80:3C:62:02:C9:57:08:7A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B82236063FD911F1BCB3B00ECF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.173.0/24
154.94.34.0/24
154.94.39.0/24
154.94.42.0/24
154.94.45.0/24
154.94.57.0-154.94.58.255
154.94.61.0-154.94.62.255
Signature Algorithm: sha256WithRSAEncryption
95:91:a0:87:38:6a:bf:75:0f:21:cb:9f:42:c0:54:75:d3:a9:
b0:d4:11:b9:84:68:32:b1:b5:5e:20:78:36:8e:ce:bf:4c:04:
72:cd:2e:06:34:e1:14:82:c3:d6:90:43:b4:e9:b7:48:35:7e:
35:98:78:23:03:7c:99:80:da:12:b9:d5:b9:5b:7e:9d:12:89:
d2:82:7e:2e:fb:48:84:21:33:a9:47:17:9c:94:51:72:47:77:
e3:70:18:76:de:c2:3a:8a:27:69:f7:5b:14:b6:7a:84:26:3e:
f1:25:9a:cd:34:80:d9:76:eb:71:15:e2:3e:4c:2b:9b:8b:af:
5c:66:ee:b4:0b:a6:3e:b5:34:cc:13:30:ff:e4:62:fa:a7:55:
e2:39:77:eb:2c:3b:48:30:81:60:f5:a5:c9:8d:82:32:27:b7:
3f:5f:e4:9c:1e:8e:dd:30:60:08:78:e8:09:ee:94:b7:67:c0:
d3:5c:8b:4a:19:1f:ad:d4:ab:f2:ff:9e:dd:95:fa:0a:24:1b:
71:d3:0e:e4:a1:22:76:1b:0c:29:30:4e:d6:a5:af:17:a4:ff:
62:6c:db:be:73:83:94:58:29:74:9f:20:60:25:79:66:26:6b:
b3:0d:a3:b8:91:12:49:6a:ab:16:a7:aa:e7:a5:ce:98:2c:f8:
64:eb:d2:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:00:24 2026 by rpki-client